CVE-2022-25368

· MEDIUMModified

← All CVEs

CVSS v3.1

4.7

EPSS

0.30%

Published

Mar 10, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products (44)

amperecomputing · ampere_altra_max_firmwarevulnerable

amperecomputing · ampere_altra_max

amperecomputing · ampere_altra_firmwarevulnerable

amperecomputing · ampere_altra

arm · neoverse-e1_firmwarevulnerable

arm · neoverse-e1

arm · neoverse-v1_firmwarevulnerable

arm · neoverse-v1

arm · cortex-a57_firmwarevulnerable

arm · cortex-a57

arm · cortex-a65_firmwarevulnerable

arm · cortex-a65

arm · cortex-a65ae_firmwarevulnerable

arm · cortex-a65ae

arm · cortex-a72_firmwarevulnerable

arm · cortex-a72

arm · cortex-a73_firmwarevulnerable

arm · cortex-a73

arm · cortex-a75_firmwarevulnerable

arm · cortex-a75

arm · cortex-a76_firmwarevulnerable

arm · cortex-a76

arm · cortex-a76ae_firmwarevulnerable

arm · cortex-a76ae

arm · cortex-a77_firmwarevulnerable

arm · cortex-a77

arm · cortex-a78_firmwarevulnerable

arm · cortex-a78

arm · cortex-a78ae_firmwarevulnerable

arm · cortex-a78ae

arm · cortex-a78c_firmwarevulnerable

arm · cortex-a78c

arm · cortex-x1_firmwarevulnerable

arm · cortex-x1

arm · cortex-x2_firmwarevulnerable

arm · cortex-x2

arm · cortex-a710_firmwarevulnerable

arm · cortex-a710

arm · cortex-a15_firmwarevulnerable

arm · cortex-a15

arm · neoverse_n1_firmwarevulnerable

arm · neoverse_n1

arm · neoverse_n2_firmwarevulnerable

arm · neoverse_n2

References (6)

https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html

Vendor Advisory

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960

Third Party AdvisoryVDB Entry

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb

PatchTechnical DescriptionVendor Advisory